22 matches found
EUVD-2026-119110
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made...
CVE-2026-123960
A buffer overflow vulnerability exists in the TOTOLINK CA300-PoE (version 6.2c.884) device. The flaw is located in the setWanConfig function of the /cgi-bin/cstecgi.cgi file. An attacker can trigger the overflow remotely by manipulating the pppoeUser/priDns/secDns arguments. Public exploits for t...
CVE-2026-7749
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
TOTOLINK N300RH buffer overflow vulnerability
TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a buffer overflow vulnerability. This vulnerability stems from the setWanConfig functio...
TOTOLINK N300RH Router setWanConfig() Code Execution
The vulnerability of the setWanConfig function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router’s microprogramming system is related to the issue of data being written outside the buffer in memory when processing the priDns parameter with value v46. Exploiting this vulnerability...
CVE-2026-7749
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
CVE-2026-7749 Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
CVE-2026-7749 Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
CVE-2026-7749
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
EUVD-2026-26941
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...
TOTOLINK N300RH Buffer Error Vulnerability
TOTOLINK N300RH is a long-range wireless router produced by TOTOLINK Corporation. The version TOTOLINK N300RH 3.2.4-B20220812 contains a buffer overflow vulnerability. This vulnerability stems from the function setWanConfig in the component POST Request Handler, specifically the...
PT-2026-36794
Name of the Vulnerable Software and Affected Versions Totolink N300RH version 3.2.4-B20220812 Description A buffer overflow can be triggered remotely via the POST Request Handler component. The issue exists in the setWanConfig function within the '/cgi-bin/cstecgi.cgi' endpoint when manipulating...
EUVD-2025-11093
Malicious code in bioql PyPI...
Totolink N600R Code Execution
The vulnerability of the setWanConfig function in the Totolink N600R router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
TOTOLINK N600R setWanConfig function buffer overflow vulnerability
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that originates from the macCloneMac parameter in the setWanConfig function failing to properly validate the length and size of the input data, which can...
CVE-2025-22900
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
CVE-2025-22900
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
CVE-2025-22900
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
CVE-2025-22900
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
CVE-2025-22900: Stack-based Buffer Overflow
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...